General
- Target b6908d5b96a81b180e4b608f7025bb3e_JaffaCakes118
- Size 692KB
- Sample240617-d5v21swgnl
- SHA256 0546af2e35fcda21cd2db1a785d5b9356fd45ebad06e5a49d3d1a478f1fe3c4a
- MD5 b6908d5b96a81b180e4b608f7025bb3e
- SHA1 1f959e6c69278e6f52566a2010196ab6f3107504
- SHA512 e84d9c877c487fa0fbd7122385fae3afbe0ac021aa30ee7f4a8821c87c4d3013d8d601e054bdfc4ba7104fda04feb93cc6aceb6d435d5e24d2c08256b416f4d9
- SSDEEP 12288:83uEvFGy0w9lbsWs5+NZYMjQzdE2bm/z87Q5CvvkG/9lAIzx7c:8+GGy0Z5+YMjQzd0/c/9lnzx7c
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
b6908d5b96a81b180e4b608f7025bb3e_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b6908d5b96a81b180e4b608f7025bb3e_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
b6908d5b96a81b180e4b608f7025bb3e_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target b6908d5b96a81b180e4b608f7025bb3e_JaffaCakes118
- Size 692KB
- SHA256 0546af2e35fcda21cd2db1a785d5b9356fd45ebad06e5a49d3d1a478f1fe3c4a
- MD5 b6908d5b96a81b180e4b608f7025bb3e
- SHA1 1f959e6c69278e6f52566a2010196ab6f3107504
- SHA512 e84d9c877c487fa0fbd7122385fae3afbe0ac021aa30ee7f4a8821c87c4d3013d8d601e054bdfc4ba7104fda04feb93cc6aceb6d435d5e24d2c08256b416f4d9
- SSDEEP 12288:83uEvFGy0w9lbsWs5+NZYMjQzdE2bm/z87Q5CvvkG/9lAIzx7c:8+GGy0Z5+YMjQzd0/c/9lnzx7c
- MD5 SHA1 SHA512 SSDEEP
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the contacts stored on the device.
-
Reads the content of SMS inbox messages.
-
Acquires the wake lock
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Tries to add a device administrator.
MITRE ATT&CK Mobile v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Device Administrator Permissions
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1Suppress Application Icon
1